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In the Claims 

Claims 1-21 and 26 were previously cancelled. 
Claims 22-25 and 27-30 are currently amended. 
Claims 22-25 and 27-3 1 remain in the application and are listed below. 

1-21. (Canceled). 

22. (Currently Amended) A system for securing data communication 
between an internet computer network and an external computer network, 
comprising: 

a client located in the internal computer network; 

a server located in the external computer network and in communication 
with the client; and 

a proxy network address translation an application level gateway proxy 
device comprising: 

components for (1) performing, at a packet level, a network address 
translation upon a stream of packets originating from the client and (2) filtering, at 
a stream level, the stream of packets and transmitting the packets to the server, 
wherein the filtering is transparent to the client, and wherein the network address 
translation component redirects the stream of packets to the filtering component; 
and 

a communications socket internal to the proxy network address 
translation application level — gateway — proxy device and communicatively 
connected to the components for (1) performing the network address translation 
and (2) filtering. 
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23. (Currently Amended) The system of claim 22, wherein the components 
of the proxy network address translation device comprise: 

a first component for filtering said stream of packets, and also for filtering, 
at a stream level and transparent to the client, a second stream of packets 
originating from the server; and 

a second component for performing said network address translation, and 
also for performing, at a packet level, a reverse network address translation with 
respect to the packets in the second stream and transmitting the packets in the 
second stream to the client. 

24. (Currently Amended) An application level gateway proxy A device[[,]] 
comprising: 

a proxy network address translation device comprising: 

a component for performing, at a packet level, a network address 
translation with respect to a stream of packets originating from a client in 
an internal network, wherein the client is communicating the stream of 
packets to a server located in an external network, and wherein the network 
address translation component redirects the stream of packets to a 
component for filtering; 

the component for filtering, at a stream level, the stream of packets, 
wherein the filtering is transparent to the client; 

a communication socket internal to the proxy network address 
translation application level gateway proxy device and communicatively 
connected to: 
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the component for performing the network address 

translation; and 

the component for filtering; and 
a component for transmitting the packets to the server after the 
packets are filtered. 

25. (Currently Amended) The proxy network address translation device of 
claim 24, further comprising: 

a component for filtering, at a stream level and transparently to the client, a 
second stream of packets originating from the server; 

a component for performing, at a packet level, a reverse network address 
translation upon the packet in the second stream; and 

a component for transmitting the packet in the second stream to the client. 

26. (Canceled). 

27. (Currently Amended) The [[method]] proxy network address 
translation device of claim 24, wherein filtering the stream of packets comprises 
transforming the stream. 

28. (Currently Amended) The [[method]] proxy network address 
translation device of claim 24, wherein filtering the stream of packets comprises 
compressing the stream. 
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29. (Currently Amended) The [[method]] proxy network address 
translation device of claim 24, wherein filtering comprises content monitoring, 
content restriction, stream transformation, traffic redirection and combinations 
thereof. 

30. (Currently Amended) A computer-implemented method for 
communication between a first network and a second network comprising: 

intercepting, at a first external socket of a proxy network address translation 
device, a stream of packets; 

performing, at a first internal component of the proxy network address 
translation device, a network address translation upon the stream of packets, the 
network address translation occurring at a packet level; 

transmitting, from the first internal component of the proxy network 
address translation device to a second internal component of the proxy network 
address translation device using a communication socket internal to the proxy 
network address translation device , the translated stream of packets; 

filtering, at the second internal component of the proxy network address 
translation device, the translated stream of packets, the filtering occurring at a 
stream level; and 

transmitting, from the second external socket of the proxy network address 
translation device, the translated and filtered stream of packets. 

31. (Previously Presented) The method of claim 30, wherein transmitting 
from the first internal component of the proxy network address translation device 
to the second internal component of the proxy network address translation device 
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comprises transmitting the translated stream of packets through an internal socket 
of the proxy network address translation service. 
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